Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 201:

  An engineer is deploying a Cisco Email Security Appliance and must configure a sender group that decides which mail policy will process the mail. The configuration must accept incoming mails and relay the outgoing mails from the internal server. Which component must be configured to accept the connection to the listener and meet these requirements on a Cisco Secure Email Gateway?

  A. access list
  B. HAT
  C. RAT
  D. sender list
  C. RAT

  ---

  Explanation

• Question 202:

  Using Cisco Cognitive Threat Analytics, which platform automatically blocks risky sites, and test unknown sites for hidden advanced threats before allowing users to click them?

  A. Cisco Identity Services Engine
  B. Cisco Enterprise Security Appliance
  C. Cisco Web Security Appliance
  D. Cisco Advanced Stealthwatch Appliance
  C. Cisco Web Security Appliance

  ---

  Explanation

• Question 203:

  Refer to the exhibit.

  

  An engineer must enable secure SSH protocols and enters this configuration. What are two results of running this set of commands on a Cisco router? (Choose two.)

  A. generates RSA key pairs on the router
  B. enables SSHv1 on the router
  C. uses the FQDN with the label command
  D. labels the key pairs to be used for SSH
  E. generates AES key pairs on the router
  A. generates RSA key pairs on the router
  D. labels the key pairs to be used for SSH

  ---

  Explanation

• Question 204:

  Which network monitoring solution uses streams and pushes operational data to provide a near real-time view of activity?

  A. SNMP
  B. SMTP
  C. syslog
  D. model-driven telemetry
  D. model-driven telemetry

  ---

  Explanation

  https://developer.cisco.com/docs/ios-xe/#!streaming-telemetry-quick-start-guide

• Question 205:

  What are two security benefits of an MDM deployment? (Choose two.)

  A. robust security policy enforcement
  B. privacy control checks
  C. on-device content management
  D. distributed software upgrade
  E. distributed dashboard
  A. robust security policy enforcement
  B. privacy control checks

  ---

  Explanation

• Question 206:

  Which category includes DoS Attacks?

  A. Virus attacks
  B. Trojan attacks
  C. Flood attacks
  D. Phishing attacks
  C. Flood attacks

  ---

  Explanation

• Question 207:

  An engineer is configuring a Cisco ESA and wants to control whether to accept or reject email messages to a recipient address. Which list contains the allowed recipient addresses?

  A. SAT
  B. BAT
  C. HAT
  D. RAT
  D. RAT

  ---

  Explanation

• Question 208:

  How does DNS Tunneling exfiltrate data?

  A. An attacker registers a domain that a client connects to based on DNS records and sends malware through that connection.
  B. An attacker opens a reverse DNS shell to get into the client's system and install malware on it.
  C. An attacker uses a non-standard DNS port to gain access to the organization's DNS servers in order to poison the resolutions.
  D. An attacker sends an email to the target with hidden DNS resolvers in it to redirect them to a malicious domain.
  A. An attacker registers a domain that a client connects to based on DNS records and sends malware through that connection.

  ---

  Explanation

  The attacker registers a domain, such as badsite.com. The domain's name server points to the attacker's server, where a tunneling malware program is installed. The attacker infects a computer, which often sits behind a company's firewall, with malware. Because DNS requests are always allowed to move in and out of the firewall, the infected computer is allowed to send a query to the DNS resolver.

  The DNS resolver is a server that relays requests for IP addresses to root and top-level domain servers.

  The DNS resolver routes the query to the attacker's command-and-control server, where the tunneling program is installed. A connection is now established between the victim and the attacker through the DNS resolver. This tunnel can be used to exfiltrate data or for other malicious purposes. Because there is no direct connection between the attacker and victim, it is more difficult to trace the attacker's computer.

• Question 209:

  What is a function of Cisco AMP for Endpoints?

  A. It detects DNS attacks
  B. It protects against web-based attacks
  C. It blocks email-based attacks
  D. It automates threat responses of an infected host
  D. It automates threat responses of an infected host

  ---

  Explanation

• Question 210:

  An engineer is configuring cloud logging on Cisco ASA and needs events to compress. Which component must be configured to accomplish this goal?

  A. Cisco analytics
  B. CDO event viewer
  C. SWC service
  D. SDC VM
  D. SDC VM

  ---

  Explanation